Re: Packet rate limiting

On Sun, Jul 13, 2003 at 09:20:52AM +0200, alessandro salvatori wrote:
> On Sat, 12 Jul 2003 18:32:27 -0700

Heh... yeah, got too much sun yesterday :)

> buffer you still have, isn't it? however in libnet it's us who decide

Right. What I'm saying is that SO_SNDBUF has different meanings depending on the type of socket you're working with. I personally can't find any documentation in manpages or Stevens which documents how a RAW or PACKET socket handles it. I can only guess that works simular to a UDP socket which like a RAW/PACKET socket is connectionless and has no window size.

Setting the SO_SNDBUF for a UDP socket has the effect of limiting the maximum datagram size you can send on that socket. (Stevens, UNPv1 Section 2.9) Technically, UDP doesn't even have a socket send buffer, but of course there is a kernel packet queue where packets are stored until they are sent. I suspect that RAW/PACKET sockets are implimented in a simular fasion.

Out of curiosity, have you tested the code? What effect (if any) has it had? That would be the real test.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Regards,
Aaron

-- 
Aaron Turner   
http://synfin.net/aturner
They that can give up essential liberty to obtain a little temporary 
safety deserve neither liberty nor safety. -- Benjamin Franklin
All emails are PGP signed; a lack of a signature indicates a forgery.